Support Disabling MFA when the User has a Specified Authority

[rwinch]

This can be useful if a particular factor or type of user should not have MFA enabled. For example, if a bearer token is used or a passkey is used, that might be enough to not require multiple factors

[therepanic]

Hi, @rwinch. Can I work on this?

[rwinch]

Even though I created it, this is not yet triaged. Please view waiting-for-triage as an indication that it should not yet be implemented.